Can Trustless Agents Be Trusted? An Empirical Study of the ERC-8004 Decentralized AI Agent Ecosystem

Empirical study finds ERC-8004 decentralized AI agent trust protocol severely compromised by Sybil attacks and design flaws

Researchers conducted the first empirical study of ERC-8004, a permissionless trust protocol for AI agent economies built on Ethereum, BNB Smart Chain, and Base, covering deployment through May 2026. They found that most agent registrations are inactive placeholders (only 3–15% expose live service endpoints), and the reputation registry is functionally broken: values are incommensurable, feedback is rarely grounded in verifiable interactions, and Sybil behavior is rampant (59–91% of reviewers flagged as coordinated). After removing Sybil-flagged feedback, up to 89% of rated agents have no valid reputation signal, rendering the protocol unreliable as a trust basis for autonomous agent transactions. The paper provides protocol-design recommendations and an empirical baseline for future AI agent market research.